Package name
kaffeine
Date
2006-04-05
Advisory ID
MDKSA-2006:065
Affected versions
2006.0 i586 , 2006.0 x86_64

Problem description

Marcus Meissner discovered Kaffeine contains an unchecked buffer while
creating HTTP request headers for fetching remote RAM playlists, which
allows overflowing a heap allocated buffer. As a result, remotely
supplied RAM playlists can be used to execute arbitrary code on the
client machine.

Updated packages have been patched to correct this issue.

Updated packages

2006.0 i586

 221dc2b4b5a7c83d2071c076ee3493ec  2006.0/RPMS/kaffeine-0.7-6.1.20060mdk.i586.rpm
 2c7e274246e1dc740f8697c0f210925d  2006.0/RPMS/libkaffeine0-0.7-6.1.20060mdk.i586.rpm
 9b5bb05954386af7505784a955243b25  2006.0/RPMS/libkaffeine0-devel-0.7-6.1.20060mdk.i586.rpm
 7b313e26ca91b6f306b28be4fb9f5aa2  2006.0/SRPMS/kaffeine-0.7-6.1.20060mdk.src.rpm

2006.0 x86_64

 8f4271cab6ec4670ed8e76d6c1711ec9  x86_64/2006.0/RPMS/kaffeine-0.7-6.1.20060mdk.x86_64.rpm
 fadb3df8afb1d523946fa59298287185  x86_64/2006.0/RPMS/lib64kaffeine0-0.7-6.1.20060mdk.x86_64.rpm
 6ed84efb236fb8e0aeccb42bbb00b57b  x86_64/2006.0/RPMS/lib64kaffeine0-devel-0.7-6.1.20060mdk.x86_64.rpm
 7b313e26ca91b6f306b28be4fb9f5aa2  x86_64/2006.0/SRPMS/kaffeine-0.7-6.1.20060mdk.src.rpm

References